re: #86 Anymouse
It can be an applet surreptitiously activated by visiting a page, a link that downloads malicious code, etc. Or it could be email link/attachment that is opened.